From bdfb10137aaf5b6d2c22b795e531a460ecce1687 Mon Sep 17 00:00:00 2001 From: "m.nabokikh" Date: Tue, 17 May 2022 18:20:37 +0400 Subject: [PATCH] Add the comment about groups request notification Signed-off-by: m.nabokikh --- server/templates.go | 3 +++ 1 file changed, 3 insertions(+) diff --git a/server/templates.go b/server/templates.go index 9be8019a..7ac18cc1 100644 --- a/server/templates.go +++ b/server/templates.go @@ -238,6 +238,9 @@ var scopeDescriptions = map[string]string{ "offline_access": "Have offline access", "profile": "View basic profile information", "email": "View your email address", + // 'groups' is not a standard OIDC scope, and Dex only returns groups only if the upstream provider does too. + // This warning is added for convenience to show that the user may expose some sensitive data to the application. + "groups": "View your groups", } type connectorInfo struct {